Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e19c9cb1-edf6-368c-8093-e5fe4c3f8533.roa
File:                     e19c9cb1-edf6-368c-8093-e5fe4c3f8533.roa (raw, json)
Hash identifier:          IIFXa33XtGY92BP6OBQ3Bp3TPKf38edoy0F1Au+EJYk=
Subject key identifier:   B5:F8:3F:AA:15:9B:0B:07:75:4A:53:5B:21:66:AF:E8:8D:F2:5E:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89E71C14CDD3528C35F200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e19c9cb1-edf6-368c-8093-e5fe4c3f8533.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        71.225.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:e7:1c:14:cd:d3:52:8c:35:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=40af8c6b-77f7-4440-81cf-67ba63abbcc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:c7:3a:e9:16:e7:8c:09:f2:7c:39:88:e9:
                    e6:49:9d:cf:67:94:7c:95:96:69:16:e2:8e:17:d3:
                    34:04:ff:e8:02:7c:31:16:fa:8c:3c:8b:42:7a:0d:
                    f5:97:ba:55:e3:9f:dc:17:09:da:ef:dd:94:4a:90:
                    df:02:33:af:85:2c:59:81:00:ab:85:3e:8b:63:25:
                    5d:64:80:0b:54:50:ce:cc:7e:15:dc:77:a3:29:75:
                    a6:5f:1b:fa:58:06:6a:0a:08:19:7e:26:b5:da:dd:
                    f2:18:2e:79:7b:6d:9e:e2:61:d3:a6:00:88:61:53:
                    dc:05:25:91:52:85:44:9d:1a:d3:32:70:41:d2:a5:
                    db:23:15:c1:4e:36:c4:d6:13:c7:e9:81:b2:48:ce:
                    a6:1d:f3:bf:cb:3c:1f:47:74:cf:f4:de:fe:8c:42:
                    cb:2a:09:f5:ec:a1:9a:1d:ce:22:bf:9e:a7:5b:4f:
                    42:a8:51:5e:65:63:54:e1:fd:6f:35:3c:f7:df:26:
                    1e:c9:13:4c:e1:ce:b0:02:aa:16:b5:1c:87:b6:c5:
                    28:1e:fc:31:29:db:62:92:e4:50:5c:fe:2f:e2:88:
                    e7:d9:f3:05:aa:90:f6:a0:ae:e6:f7:dc:25:f7:fa:
                    ce:b0:d6:b5:86:f4:78:e9:d6:6b:93:22:03:eb:1f:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F8:3F:AA:15:9B:0B:07:75:4A:53:5B:21:66:AF:E8:8D:F2:5E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e19c9cb1-edf6-368c-8093-e5fe4c3f8533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:25:01:76:7a:39:3c:94:04:68:16:25:25:d0:71:dc:17:77:
         7b:54:8a:7d:90:ca:62:94:08:9a:34:6f:79:fb:4e:60:78:03:
         32:d5:74:b8:2c:84:98:e1:c1:12:11:7c:73:05:bb:b6:a0:79:
         6f:48:a8:7e:da:96:1c:f0:1b:98:85:a1:1d:b4:3a:f4:5c:58:
         73:cd:b3:f3:63:87:92:c9:3f:2c:29:e5:23:4e:f6:2d:60:28:
         52:01:2c:66:f8:8f:fa:ea:9f:b2:67:dc:a3:f8:25:2b:37:bb:
         62:95:96:e8:0d:61:d9:9e:83:79:b8:8d:13:57:e4:d2:1f:43:
         2b:2f:0a:1f:bb:7c:f6:45:ea:08:8f:bf:eb:b2:a4:af:8e:63:
         13:f6:c8:de:a7:00:7d:27:58:93:cc:e6:1b:07:e4:1f:51:c2:
         17:7f:3c:94:a5:03:85:8b:df:22:c2:f3:b8:e7:c3:21:55:e3:
         c8:85:35:2c:c7:06:eb:0e:87:81:1c:a3:3f:a6:4d:a0:a1:85:
         93:78:9d:47:f5:50:98:b1:c9:e1:43:cc:45:d2:c8:8f:e8:82:
         98:92:bb:c3:a6:a6:e7:ce:5d:c5:89:ab:54:24:4d:30:22:62:
         5b:da:95:4b:9a:25:8a:82:af:f4:73:b4:50:53:78:e5:97:d7:
         75:b7:31:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:37:04 2024 by rpki-client on console-fra.rpki-client.org